$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa File: fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa (raw, json) Hash identifier: VEUu8jnjgJZgPjpKlT01ZZap4V9VBcsbUEl9B+oNSvM= Subject key identifier: 47:D9:69:99:05:82:29:97:25:B9:2E:C3:E8:56:7F:1B:DE:3C:A4:F0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6BB4E0B210163CF122DA7EDC8DA9561DF5D28B3E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa Signing time: Tue 19 Aug 2025 16:50:31 +0000 ROA not before: Tue 19 Aug 2025 16:50:31 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b4:e0:b2:10:16:3c:f1:22:da:7e:dc:8d:a9:56:1d:f5:d2:8b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:50:31 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=6e97252fba1a2cdff0786ccbe856f60c67b316e28445930908f8e0676eaa87b7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:e3:b6:0f:11:be:0b:60:ea:8c:3d:0e:ca: 6d:82:45:a5:8f:53:c7:e8:2d:b6:e3:29:51:59:24: d7:f2:bf:fa:e6:dd:0b:3c:1d:9b:24:cb:f4:99:11: 22:9e:eb:51:01:8a:51:fb:93:b8:53:1c:a6:b6:b0: 48:3a:38:b8:cc:9c:a5:a1:fc:67:e2:41:aa:4f:25: d0:cf:fe:fc:d4:42:4c:bb:d9:0d:14:b7:19:70:bc: 52:5d:25:85:30:e2:1b:81:5f:d7:f0:05:25:da:f2: 95:a7:fb:98:dc:2f:c4:da:60:50:8a:13:b2:54:53: fc:8c:f6:55:7c:0b:11:12:d4:7b:0d:40:1e:5d:9e: c2:62:ea:b4:da:e9:7d:07:66:52:e8:c5:2d:b6:8e: 2f:3d:ee:b0:d9:47:ed:37:d6:e7:aa:34:af:19:10: 3c:ec:df:db:86:09:ab:17:e4:20:b9:31:9d:31:70: 26:77:82:e0:a7:cc:ce:7b:7e:8f:29:04:4a:38:04: 6f:29:c4:a1:6c:28:ee:35:8f:0f:6b:6a:42:21:f2: f8:fe:07:9f:58:90:a9:c7:ae:22:1c:38:8f:8e:b5: 21:ea:a5:53:e9:1e:dd:86:20:0d:fd:cc:ce:86:ed: ab:02:ef:27:d4:c6:20:62:37:d8:7c:6b:9e:5e:4f: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:69:99:05:82:29:97:25:B9:2E:C3:E8:56:7F:1B:DE:3C:A4:F0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fb9df9b5-d079-4021-ba4d-b1bb1d31050a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 74:a0:26:44:32:9a:e3:52:15:f8:e5:a0:ba:99:be:64:5b:58: 20:24:8f:6b:11:da:e0:9a:b9:59:f9:88:25:ba:c6:f3:1d:9c: 29:5a:1b:8a:08:c1:9a:7a:98:ee:83:8b:18:74:4d:c0:5f:c0: 88:e5:38:d5:93:d3:14:01:5a:e1:9f:5d:d7:4c:8d:42:62:b4: f0:bd:a8:70:a8:6c:1d:01:e9:63:d4:a4:ff:1a:b9:75:25:d7: 6a:44:b5:da:41:31:93:7d:29:7d:68:e4:c3:30:68:a6:2e:74: 08:91:2b:8a:f8:ed:8b:b2:6d:3d:25:1e:b1:44:e0:a9:bd:58: 0e:af:d4:21:1a:04:95:33:8b:bd:87:98:9b:36:30:df:d1:66: 5e:21:a8:97:dd:8d:72:2f:2e:cf:de:a0:6a:0f:5e:33:95:58: 3b:2f:5f:f6:e7:3d:29:05:a1:b0:f7:11:dd:b4:d7:ae:d9:3d: 7c:65:bb:9e:5c:fb:0f:4b:d3:38:1f:a0:2d:3b:44:d2:a0:e8: 7c:7a:4a:23:08:b2:e8:03:f4:5a:aa:75:0f:bf:ab:55:03:7e: f4:a3:1c:be:4d:0e:49:45:62:3c:8d:75:88:9a:42:a8:96:48: 15:dd:5e:9d:4c:fe:ce:4a:24:5e:bd:08:96:b2:cb:52:46:90: ab:50:b4:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUa7TgshAWPPEi2n7cjalWHfXSiz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY1MDMxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTk3MjUyZmJhMWEyY2RmZjA3ODZjY2JlODU2ZjYwYzY3 YjMxNmUyODQ0NTkzMDkwOGY4ZTA2NzZlYWE4N2I3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClcOO2DxG+C2DqjD0Oym2CRaWPU8foLbbjKVFZJNfyv/rm 3Qs8HZsky/SZESKe61EBilH7k7hTHKa2sEg6OLjMnKWh/GfiQapPJdDP/vzUQky7 2Q0UtxlwvFJdJYUw4huBX9fwBSXa8pWn+5jcL8TaYFCKE7JUU/yM9lV8CxES1HsN QB5dnsJi6rTa6X0HZlLoxS22ji897rDZR+031ueqNK8ZEDzs39uGCasX5CC5MZ0x cCZ3guCnzM57fo8pBEo4BG8pxKFsKO41jw9rakIh8vj+B59YkKnHriIcOI+OtSHq pVPpHt2GIA39zM6G7asC7yfUxiBiN9h8a55eT2RFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUR9lpmQWCKZcluS7D6FZ/G948pPAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZiOWRmOWI1LWQwNzktNDAyMS1iYTRkLWIxYmIxZDMxMDUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAdKAmRDKa41IV+OWgupm+ZFtYICSP axHa4Jq5WfmIJbrG8x2cKVobigjBmnqY7oOLGHRNwF/AiOU41ZPTFAFa4Z9d10yN QmK08L2ocKhsHQHpY9Sk/xq5dSXXakS12kExk30pfWjkwzBopi50CJErivjti7Jt PSUesUTgqb1YDq/UIRoElTOLvYeYmzYw39FmXiGol92Nci8uz96gag9eM5VYOy9f 9uc9KQWhsPcR3bTXrtk9fGW7nlz7D0vTOB+gLTtE0qDofHpKIwiy6AP0Wqp1D7+r VQN+9KMcvk0OSUViPI11iJpCqJZIFd1enUz+zkokXr0IlrLLUkaQq1C04w== -----END CERTIFICATE-----Generated at Wed Aug 20 10:47:36 2025 by rpki-client